lainwir3d/dolibarr
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

Enhance the WAF

Browse Source
This commit is contained in:
Laurent Destailleur 2021-03-24 23:14:22 +01:00
parent d1fa46089f
commit 6f01869bcb
1 changed files with 4 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

6
htdocs/core/lib/functions.lib.php
View File

@ -752,7 +752,8 @@ function checkVal($out = '', $check = 'alphanohtml', $filter = null, $options =
$out = trim($out); $out = trim($out);
do { do {
$oldstringtoclean = $out; $oldstringtoclean = $out;
$out = str_ireplace(array('"', '"', '../'), '', $out); // Note &#38, '&#0000038', '&#x26'... is a simple char like '&' alone but there is no reason to accept such way to encode input data.
$out = str_ireplace(array('&#38', '&#0000038', '&#x26', '&quot', '&#34', '&#0000034', '&#x22', '"', '&#47', '&#0000047', '&#x2F', '../'), '', $out);
} while ($oldstringtoclean != $out); } while ($oldstringtoclean != $out);
// keep lines feed // keep lines feed
} }
@ -765,7 +766,8 @@ function checkVal($out = '', $check = 'alphanohtml', $filter = null, $options =
$out = trim($out); $out = trim($out);
do { do {
$oldstringtoclean = $out; $oldstringtoclean = $out;
$out = str_ireplace(array('"', '"', '../'), '', $out); // Note &#38, '&#0000038', '&#x26'... is a simple char like '&' alone but there is no reason to accept such way to encode input data.
$out = str_ireplace(array('&#38', '&#0000038', '&#x26', '&quot', '&#34', '&#0000034', '&#x22', '"', '&#47', '&#0000047', '&#x2F', '../'), '', $out);
} while ($oldstringtoclean != $out); } while ($oldstringtoclean != $out);
} }
break; break;